Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e2039333034.roa
File:                     3139342e33332e3134392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          KUWobVfk2o9B7UMs2yFRBOS3qrfOdF5SxsEqRRplHBU=
Subject key identifier:   1B:E9:1C:26:61:F3:04:68:6B:C0:D6:B0:5D:B7:2F:B0:07:DC:A6:41
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       186DB1265475EDD6D708225ACE0823AC5D79B571
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:41 +0000
ROA not before:           Fri 05 Jun 2026 13:46:41 +0000
ROA not after:            Fri 04 Jun 2027 13:51:41 +0000
asID:                     9304
IP address blocks:        194.33.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6d:b1:26:54:75:ed:d6:d7:08:22:5a:ce:08:23:ac:5d:79:b5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:41 2026 GMT
            Not After : Jun  4 13:51:41 2027 GMT
        Subject: CN=1BE91C2661F304686BC0D6B05DB72FB007DCA641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:f6:88:7c:88:51:eb:55:69:53:8d:b1:45:
                    21:62:bf:b4:a8:56:9d:10:5f:b4:b5:64:a4:30:39:
                    ef:dd:3c:ee:13:e0:25:71:00:d7:ff:c3:8f:b3:53:
                    d4:f6:be:54:8f:5c:8f:32:60:15:81:a6:65:81:08:
                    fa:85:e9:73:f8:3a:94:71:58:52:15:f3:22:99:f9:
                    e8:5d:a1:2d:cf:38:ab:1b:75:e4:14:ec:c5:f5:3a:
                    35:ce:44:eb:11:76:0c:fb:4a:cc:d4:f3:28:28:ce:
                    db:1f:4a:75:c7:6f:f1:4b:53:74:94:0b:e2:91:5b:
                    e5:11:e9:a0:bd:b8:76:d0:42:35:58:b0:70:cd:3c:
                    19:aa:de:b4:ae:e4:1f:ae:dc:d1:a3:90:90:0a:e9:
                    5f:b9:92:a4:d6:4a:2d:03:16:2f:5f:5e:02:3b:96:
                    9e:16:ee:1c:57:6b:1e:8b:88:bd:32:3d:7b:ef:54:
                    ab:0c:5e:f9:a0:7e:57:34:71:9a:a1:e5:78:a7:3a:
                    8c:4e:62:e2:b8:48:4a:39:3e:92:01:83:26:bb:f1:
                    fb:80:f5:78:75:93:61:f7:71:a8:35:43:95:b2:d5:
                    f8:a1:19:64:88:49:3b:d0:f7:42:c6:4b:37:59:77:
                    12:7d:8b:72:13:73:06:b6:60:24:17:e5:ff:58:ab:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:1C:26:61:F3:04:68:6B:C0:D6:B0:5D:B7:2F:B0:07:DC:A6:41
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:dd:b0:9b:a6:bb:16:e8:87:a8:bc:77:a1:af:b8:b3:8e:
         33:0b:92:bf:fc:cd:4d:61:5d:1e:49:cd:ad:de:32:81:e8:4b:
         0f:8a:d5:59:9e:8f:9f:7a:16:a9:38:33:36:29:b4:68:64:84:
         78:ae:03:e1:48:71:95:86:87:dd:a8:2c:98:4b:7d:2f:98:e5:
         e9:c6:47:59:3a:f8:1b:90:f7:e0:17:98:b1:97:a9:76:50:ac:
         ac:5c:72:34:9e:b1:dd:5f:e2:f8:d4:15:81:72:94:b5:43:23:
         13:b9:7c:16:c5:90:91:ea:66:f6:bf:26:41:f5:85:bc:2c:96:
         a7:04:63:4a:99:cb:f2:0d:07:72:bf:c1:11:e9:b9:7e:9d:bd:
         dc:35:2a:21:7e:b2:7b:27:f1:9c:d4:2c:08:65:8f:51:5b:2a:
         43:13:59:f8:41:50:e6:7a:d6:ad:44:00:9c:a4:55:fe:ab:ac:
         f6:18:97:8b:5c:58:fc:1a:08:1d:4d:d2:59:8e:aa:e0:fd:14:
         84:5f:d8:2c:de:16:fe:1b:79:96:28:59:f4:a1:ad:ee:61:af:
         61:34:07:5a:67:0b:98:fb:02:e1:83:77:5b:0d:32:33:5f:d4:
         25:fb:27:cb:3e:fa:91:73:e9:7b:12:ab:da:5b:de:ce:0a:ea:
         45:98:53:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:49 2026 by rpki-client